Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/b6554e1a-f47a-3b51-9cbc-cb9695ae6a38.roa
File:                     b6554e1a-f47a-3b51-9cbc-cb9695ae6a38.roa (raw, json)
Hash identifier:          /uZfLecyT0lmzqjgnNdfNbrzqsUexoYOgO7pUvLywrs=
Subject key identifier:   4C:ED:36:80:EE:9F:47:32:85:77:60:88:FD:E9:5E:8B:82:17:43:48
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6247EFDB3EC1F4C785D920
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/b6554e1a-f47a-3b51-9cbc-cb9695ae6a38.roa
Signing time:             Thu 30 Jul 2026 18:45:34 +0000
ROA not before:           Thu 30 Jul 2026 18:45:34 +0000
ROA not after:            Wed 28 Oct 2026 18:45:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:125::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:47:ef:db:3e:c1:f4:c7:85:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:34 2026 GMT
            Not After : Oct 28 18:45:34 2026 GMT
        Subject: CN=b0de00a5-98b5-4321-b17e-2bb3d0e3cb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:b7:ef:8a:a8:e3:05:99:b1:89:65:e2:a5:
                    49:78:03:f9:e3:c7:57:91:d6:fc:08:e8:b9:f9:48:
                    76:bd:84:67:50:61:5a:16:ed:74:1f:3b:6a:c4:b6:
                    25:0a:ab:80:a1:c7:98:1b:46:bb:6c:3f:22:1c:a4:
                    96:b0:6c:83:fc:96:78:65:e8:f2:f2:e8:32:9e:4b:
                    ce:29:e8:29:31:82:c0:cc:d4:64:9f:2e:4d:86:05:
                    ed:57:bc:05:d4:32:08:9c:4a:41:1d:67:6d:aa:c6:
                    9e:32:12:b0:07:97:10:e9:b0:81:da:9c:57:fc:cf:
                    e2:0f:f6:42:80:35:a7:bd:ab:6f:f9:25:28:19:27:
                    17:19:05:16:24:9d:89:c5:02:1e:5d:58:0f:bd:c2:
                    65:73:cd:fe:c3:c6:ce:3a:ef:13:0c:c7:84:6e:90:
                    ff:64:84:e8:94:7b:fb:65:3f:c0:fa:3c:6b:1b:49:
                    c0:60:5b:2a:82:0a:db:af:81:ad:e5:a9:88:9c:de:
                    47:6e:a2:ec:0b:2b:61:2b:b5:88:93:ca:c2:55:00:
                    2f:13:f7:96:3b:10:29:3c:9f:d9:f8:8c:a9:a0:71:
                    0f:e6:f3:80:d6:23:7f:5b:cf:f4:21:3f:3c:ae:3a:
                    cb:e7:2a:e9:9f:f7:ac:3a:93:e5:95:45:0d:a5:dc:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:ED:36:80:EE:9F:47:32:85:77:60:88:FD:E9:5E:8B:82:17:43:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/b6554e1a-f47a-3b51-9cbc-cb9695ae6a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:125::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:85:85:6b:14:4a:ab:aa:ef:4f:91:f3:52:1a:8b:42:b4:df:
         a1:22:53:f2:19:26:8d:f1:e3:bb:49:78:ac:be:53:09:ba:19:
         82:19:b2:94:bf:54:16:cc:09:48:ed:67:de:dc:1a:bc:1d:a7:
         2a:88:ba:9f:b5:e9:2c:5b:20:cb:d6:00:5e:fb:ae:12:11:6b:
         b6:57:e1:47:eb:61:25:f5:e4:f7:48:10:9e:49:cb:86:8b:bf:
         fd:e8:4d:0f:16:43:c3:de:da:73:27:f3:33:69:b5:8c:0f:c7:
         a0:0f:b8:d7:74:90:a5:c8:70:70:4d:84:87:18:09:26:3d:39:
         19:6f:fa:a7:6a:90:7e:52:96:49:27:31:21:42:91:c5:fe:16:
         36:06:bb:9f:c5:4a:23:d1:fc:eb:ee:46:40:66:c0:27:f3:07:
         96:f3:f9:29:a9:2f:86:bc:51:31:38:e5:b2:bd:4f:72:d5:db:
         1a:c8:4e:83:7d:e7:98:34:2c:fd:df:c1:71:1b:d6:08:ce:4c:
         70:8e:87:e7:3d:2d:f4:a8:11:c8:07:3d:37:5c:6f:aa:88:fa:
         2d:a8:12:7f:02:40:1b:84:61:c7:9e:70:96:35:2f:4f:2b:54:
         f8:3f:92:fd:91:6c:4d:25:6f:3a:0d:c9:a4:5d:f7:eb:77:90:
         34:a2:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:19:00 2026 by rpki-client